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DETAILED ACTION 
Amendment 

1 . The amendment timely filed on June 22, 1999 has been entered. 

Response to Arguments 

2. Applicant's arguments with respect to claims 1-19 have been considered but are moot in 
view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

3. The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

4. Claims 1-8 & 11-18 are rejected under 35 U.S.C. 103(a) as being unpatentable by Schloss 
(5,706,507). 

5. As to (amended) claim 1, Schloss discloses: 

a. one or more web servers having electronic versions of documents available by request 
where content servers are deemed to be document servers; See Figs. 1-2; 
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b. a search engine having access to access control lists for documents on the web servers, 
the access control list linking authorized users with all documents permitted for each authorized 
user, whereby documents found in a search are screened with the list to determine the documents 
for which a user performing a search has access; See Figs. 3-4, 5C, 7 & 1 1; Abstract; 5:45-67; 
6:1-67; 7:1-25; 8:40-54. 

6. Schloss discloses the claimed invention except for wherein screening is done at the web 
server. It would have been obvious to one having ordinary skill in the art at the time the invention 
was made to perform the screening at the web server since it was known in the art that computing 
an operation as the server where it is requested and returning the result is faster and more efficient 
than providing a response which must then be computed at the client. 

7. As to claim 2, the modified invention of Schloss discloses: 

a. means for forwarding to the user only those document titles compatible with the 
authorized access of the user; See Abstract; 7:1-25; 8:40-54. 

8. As to claim 3, the modified invention of Schloss discloses: 

a. a communications link between a query server connected to the search engine; See Figs. 
1-2; and 

b. access control lists (advisory servers) associated with the web servers; See Figs. 1-2. 
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9. As to (amended) claim 4, the modified invention of Schloss discloses: 

a. executing a query on a query server having access to a document index of documents 
available for searching on document servers provided in the web site by a person having a unique 
identification code without regard to access control limitations, yielding a list of all relevant 
documents having a unique URL wherein it is deemed that persons having a unique id for access 
during the time blocked periods would also use the system as described for other access; See Figs. 
4 & 9B; Abstract; 4:1-21; 1 1:1-55; 7:1-25; 

b. reviewing all URLs by the document servers after the search is executed using an access 
control list associated with each document server to check whether each URL is compatible with 
the access level of the identification code of the person executing the query wherein parents and 
children are deemed to have different access levels, See Abstract; 1 1 : 1-55; and 

c. delivering only those documents whose URL is compatible with the access level of the 
person: See Abstract: 7:1-25; 8:40-55. 

10. As to claim 5, Schloss discloses: 

a. providing a data link between the query server and access control lists for associated 
web servers wherein the access control list is deemed to be on the advisory server; See Figs. 1-2, 
& 6; 4:57-67. 
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11. As to claim 6, Schloss discloses: 

a. storing the access control list separately from the index of documents wherein the index 
of documents are deemed to be on the content server; See Figs. 1-2 & 6; 5:1-52. 

12. As to claim 7, Schloss discloses: 

a. storing the access control list separately from the index of documents wherein the 
access control list is deemed to be on the advisory server and the index of documents is deemed 
to be on the ; See Figs. 1-2 & 6; 2:37; 4:47-67; 5:1-52. 

13. As to claim 8, Schloss discloses: 

a. implementing access control with partial URLs indicating the hierarchy of documents to 
which a person with a unique identification code has access wherein a fuzzy match is deemed to 
be a partial URL; See 7:5-44. 

14. As to claim 11, Schloss discloses: 

a. wherein a single access control list is provided for all document servers wherein it is 
deemed that one access (advisory) server can be used for all document servers; See Figs. 1-2; 5:1- 
67; 6:1-67. 
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15. As to claim 12, Schloss discloses: 

a. wherein an access control list is provided for each document server wherein it is deemed 
that an access server can be provided for each document servers (content server); See Figs. 1-2; 
5:1-67; 6:1-67. 

16. Claim 9-10 & 13-19 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Schloss '507 in view of Kirsch US Patent (5,751,956). 

17. As to (amended) claim 13, Schloss discloses: 

a. providing a plurality of document servers in the web site , each havin g an association 
with a unique URL, each document server having an access control list defining user identification 
and for each user identification listing URLs for which access is permitted or denied wherein each 
document server's access control is deemed to be an access server (advisory server); See Figs. 1- 
2; 

b. executing a query on a query server having access to a document index of documents 
available for searching on the document servers by a person having one of said identification 
codes; See previous responses; 

c. producing only those documents whose URL is compatible with the access level of the 
identification code of the person; See previous responses. 
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18. As to claim 13, Schloss discloses the claimed invention except for the determining by one 
of the document servers whether each URL is compatible with the access level of the 
identification code of the person. Kirsch teaches that it is known to determine by one of the 
document servers whether each URL is compatible with the access level of the identification code 
of the person. It would have been obvious to one having ordinary skill in the art at the time the 
invention was made to determine by one of the document servers whether each URL is 
compatible with the access level of the identification code of the person as taught by Kirsch, since 
Kirsch states at column 7, lines 60-67 and column 8, lines 1-46 that such a modification would 
allow the server to identify inappropriate repeated submissions of the URL to the server. 

19. As to claim 14, Schloss discloses: 

a. wherein the URLs are expressed in HTTP protocol; See 4:30-56. 

20. As to claim 15, Schloss discloses: 

a. wherein each access control list lists URLs for each user identification number with a 
hierarchical indication of documents for which access is permitted or denied wherein the URL is 
deemed to provide a hierarchical indication of documents; See 5:40-67; 6:1-67; Figs. 4, 5C, & 
9B. 
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21. As to claim 1 6, Schloss discloses: 

a. wherein hierarchical indication is by partial URLs; See Figs. 4, 5C, & 9B; 7:1-44. 

22. As to claim 17, Schloss discloses: 

a. accessing the access control list by the filesystem of the query server; See Figs. 1-2 & 4; 
5:1-67; 6:1-67. 

23. As to claim 18, Schloss discloses: 

a. accessing the access control list by a file transfer protocol wherein HTTP is deemed to 
be a file transfer protocol and the browsers also have a file transfer protocol; See 4: 1 -67. 

24. As to claim 19, the modified Schloss discloses the claimed invention except for 
confirming access to the access control list by a script message from a document server. It would 
have been obvious to one having ordinary skill in the art at the time the invention was made to 
confirm access to the access control list by a script message from a document server since it was 
known in the art that restricting access usually provides a message when access is restricted and 
providing a message when access is successful for the purpose of informing the user of his/her 
accessibility to data is helpful to the user when restricting access. 
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25. As to claim 9, Schloss discloses the claimed invention except for implementing access 
control with a common gateway interface script. Kirsch teaches that it is known to implement 
access control with a common gateway interface script as set forth at column 2, lines 49-67 and 
column 3, lines 1-65. It would have been obvious to one having ordinary skill in the art at the 
time the invention was made to implement access control with a common gateway interface script, 
as taught by Kirsch in order to allow a small program to be executed by a server in response to a 
client URL request. 

26. As to claim 10, the modified invention of Schloss discloses: 

a. wherein said common gateway interface scripts returns a message to the query server 
indicating URLs to which a person with a unique identification code has access; See Kirsch:28- 



67. 



Conclusion 



27. Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Charles Rones whose telephone number is (703) 306-3030. The examiner 
can normally be reached on Monday through Thursday from 8 a.m. to 4 p.m. EST. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Thomas Black, can be reached on (703) 305-9707. 

Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
Washington, D.C. 20231 

or faxed to: 

(703) 308-9051, (for formal communications intended for entry) 

Or: 

(703)308-5403 (for informal or draft communications, please label 
"PROPOSED* 1 or "DRAFT") 



Hand-delivered responses should be brought to Crystal Park II, 2121 Crystal Drive, 
Arlington. VA., Sixth Floor (Receptionist). 
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Any inquiry of a general nature or relating to the status of this application or proceeding should be 
directed to the Group receptionist whose telephone number is (703) 305-3900. 




August 18, 1999 



4^ 



